php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #57887 open_basedir is ignored
Submitted: 2007-10-23 11:50 UTC Modified: 2008-07-01 11:11 UTC
From: 071023 at vmlinuz dot nl Assigned:
Status: Closed Package: xattr (PECL)
PHP Version: Irrelevant OS: any
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: 071023 at vmlinuz dot nl
New email:
PHP Version: OS:

 

 [2007-10-23 11:50 UTC] 071023 at vmlinuz dot nl
Description:
------------
xattr-1.0 is ignoring the open_basedir restriction.

Reproduce code:
---------------
<?php
$file = 'some_file_outside_the_open_basedir';
$user_attributes = xattr_list($file);

echo "\n User attributes: \n";
foreach ($user_attributes as $attr_name) {
    printf("%s\n", $attr_name);
}
?> 

Expected result:
----------------
PHP Warning:  xattr_list() function.xattr_list: open_basedir restriction in effect. File(/tmp/aaa) is not within the allowed path(s): (/var/www/html) in /var/www/html/xattr-bugcheck.php on line 5

Actual result:
--------------
names of actual attributes

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2008-07-01 11:11 UTC] mg at iceni dot pl
Thank you for your bug report. This issue has been fixed
in the latest released version of the package, which you can download at
http://pecl.php.net/get/xattr


 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sat Dec 14 00:01:26 2024 UTC